Security Analyst

Security Analyst

Key responsibilities:

Security Platform Management

• Administer and manage CrowdStrike security platform, including deployment, configuration, and optimization
• Monitor security alerts and events through CrowdStrike console
• Perform regular health checks and ensure platform updates are applied
• Manage endpoint detection and response (EDR) activities
• Configure and fine-tune detection rules and policies

Threat Detection & Response

• Monitor, analyse, and respond to security incidents and alerts
• Investigate suspicious activities and potential security breaches
• Perform root cause analysis on security incidents
• Document incident response procedures and maintain incident logs
• Implement remediation measures and track resolution progress

Security Reporting &  Communication

• Prepare regular security status reports for management
• Provide updates on security metrics, incidents, and trends
• Generate monthly and quarterly security dashboards
• Present findings and recommendations to stakeholders
• Respond to internal and external due diligence queries regarding security controls and practices

Threat Intelligence &  Awareness

• Stay current with emerging security threats, vulnerabilities, and attack vectors
• Monitor threat intelligence feeds and security advisories
• Assess the relevance and impact of new threats to the organisation
• Share threat intelligence insights with the team
• Recommend proactive security measures based on threat landscape

Security Testing & Compliance

• Coordinate and manage annual penetration testing exercises
• Work with external security assessors and penetration testers
• Review penetration test findings and develop remediation plans
• Track and verify remediation of identified vulnerabilities
• Conduct annual Essential Eight security maturity assessments
• Ensure compliance with Essential Eight framework requirements
• Document security controls and maintain compliance evidence

This role requires a professional, confident and highly organized person. To be successful in this fast-paced role, you will possess the following:

Required:

• 4+ years working in information security or cybersecurity operations
• Bachelor’s degree in information technology, Cybersecurity, Computer Science, or related field
• Familiarity with fund management, non-bank lending industry and regulatory landscape.
• Hands-on experience with security monitoring and incident response
• Should be open for Full Onsite and Early Day Shift Schedule.

Preferably:

• Relevant security certifications (Security+, CySA+, CEH, GCIH, or similar)
• CrowdStrike Certified Falcon Administrator or similar certification
• Experience with compliance frameworks (ISO 27001, NIST, CIS Controls)
• Familiarity with scripting languages (PowerShell, Python)
• Knowledge of Australian government security frameworks (ACSC, ISM)
• Ability to explain technical security concepts to non-technical stakeholders
• Proven experience with CrowdStrike or similar EDR/XDR platforms
• Strong understanding of security principles, threats, and vulnerabilities
• Knowledge of Windows and Linux operating systems
• Familiarity with network protocols, firewalls, and security technologies
• Experience with security information and event management (SIEM) tools
• Knowledge of penetration testing methodologies and vulnerability management